fkie-cad / socbed

A Self-Contained Open-Source Cyberattack Experimentation Testbed
GNU General Public License v3.0
35 stars 9 forks source link

How does company router install packerbeat? #92

Open Iateautumn opened 1 week ago

Iateautumn commented 1 week ago

Hi

I want to install new application in hosts, however it seems that there is no any dns configuration in all host of socbed, which means they are not capable to resolve any domain name, but how does this ansible script work:

- name: Download packetbeat to /tmp
  get_url:
    url: "https://artifacts.elastic.co/downloads/beats/packetbeat/{{ packetbeat_name }}.tar.gz"
    dest: "/tmp"
  retries: 2
  register: result
  until: result is succeeded

by the way, I find that the gateway of internet router disappear sometimes, do you have any idea of this?

if my memory serves me right, all hosts can visit external network by ip instead of domain because internet router have a network interface which is nat mode, and none of them configure dns right?

thanks

Iateautumn commented 6 days ago

oh, I find that unbound serve as a dns resolver in socbed, but they sometimes don't work well, hence I update internet router to latest version. It seems unbound works well in most cases

Maspital commented 4 days ago

Hi, sorry for the long wait (here and in your other issue) — development for this project finished over two years ago, so we can’t answer most questions off the top of our heads without revisiting the details ourselves. Your issues are definitely helpful and appreciated, but it does take some time to resolve them as day-to-day priorities often take precedence.

Regarding this issue, I'll first check which parts of the provisioning process break when IPFire is upgraded a couple of versions. Perhaps its also a feasible solution to leave it as is and upgrade in the last step of the corresponding ansible playbook.